MAL-2025-148482 Malicious code in taurus-uninstall-commitizen-postcss-loader (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2e1a682f716f356bb60bb19ca4b742e28e0a2f687bd3c65928b836c790d0f8fb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149816 Malicious code in yildun-lint-staged-octans-phoebe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e7983dc65e29fc48e8e547d12aae1f60c133189946c4012e145b07c435d3d791 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140219 Malicious code in bulma-mutation-server-ariel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e33c9fe09bdabfbe33847cdc28274813f327e3a1bbc8730cd30684270260cedc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142015 Malicious code in eleventy-websockets-restart-telesto (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7742050dee45cea14cff82fe189f760d1c4c45aeae6ce69e717956ca60dbd543 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141779 Malicious code in dotenv-safe-transport-corvus-hydra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5d833eb99411857bbedad036c317ede897b63d5919e73e692817feacf64b3549 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139211 Malicious code in adonis-gulp-ini-soap (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 86ff4c41703f7fa7c297b526ca575aaa468f04fe7b9277ccc7c91c4e74dfd5d5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139450 Malicious code in antares-xenos-fornax-forever (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 36082075eac92799bc35bc96d11c348c8e7c0aab61e9f5a9c5d394fbc5d7821c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141830 Malicious code in dynamo-meteor-slides-elektra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a8ade6f541b404705505f9e2dcfc83465bea3aef4ee1280d3246806fdd04db9b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145034 Malicious code in miranda-frontend-luna-webdriver-mocha (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1f55817a1ac24be0c51e3cd4c4e8c579be5d62c9c64c9f10d6f6aa7ac1f47060 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146127 Malicious code in phenomic-cordelia-xerxes-lacerta (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9b67b0a11a65e6ab402390b6bb142f74647371dc0d7415f991c7eba4fb8d444f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142696 Malicious code in framework-wolf-yaml-electron-builder (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c5171dda2e66d0c63bc03ea95d0b716b25ed5c71b006bc563842e12f1b9b6ae5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

OPENSUSE-SU-2025:15733-1 weblate-5.14.3-1.1 on GA media

These are all security issues fixed in the weblate-5.14.3-1.1 package on the GA media of openSUSE Tumbleweed...

Malicious code in cindy-martabak48-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ee6d2e47543fa9fa140d9a145b40c003d2915d66fa7dc5099b7ba0385374e85e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gita-telur54-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bb020c5b7a1e42b51077e2d8dc3527ead9fd7c9755c37a81e6299a191bcdd058 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in joko-telur16-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4d938c99c3ba0673b52e312eca1844545a7cb221ab639198de9fc22e0535d8c0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in maya-nasicampur53-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fc303b8d333e34ccd885c30d22a4f535630b5868e5283132cd28f325e1ea27a3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mulyono-getas44-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d0319cb761dead005792bdc52f0378034a91eb2aa07958dc7913bdd8c345f4b6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in thin_minnow_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6ad81f048921fb670bfe9ba735e017914c364e60c436a5f8f0fab8c86c89c6d2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tuti-bubursumsum2-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8873c59ecb3b95119164a1536265962f4e1d32461f70561157b0c3c730b0ebd4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bella-sroto76-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3729d811aa11b15200c8bae859f69b066b38eeee188fd29ce0a8af8fc70d9a55 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...